Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/ca9ff3-19a2-4e65-85f7-546a845b6b39/1/fvh727KV4chetLDjVmFTwiGEX4E.mft
File:                     fvh727KV4chetLDjVmFTwiGEX4E.mft (raw, json)
Hash identifier:          A7dyCseDgEtpBIPPQWL1YI/ltXpxha7SAGuzJQOA8KI=
Subject key identifier:   9B:32:82:71:83:BF:9E:C9:F5:A1:00:66:8F:E1:1E:B2:7C:E8:F7:24
Authority key identifier: 7E:F8:7B:DB:B2:95:E1:C8:5E:B4:B0:E3:56:61:53:C2:21:84:5F:81
Certificate issuer:       /CN=7ef87bdbb295e1c85eb4b0e3566153c221845f81
Certificate serial:       01984E1E4366F193673AC155CBAB089B9004
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fvh727KV4chetLDjVmFTwiGEX4E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/ca9ff3-19a2-4e65-85f7-546a845b6b39/1/fvh727KV4chetLDjVmFTwiGEX4E.mft
Manifest number:          014B
Signing time:             Sun 27 Jul 2025 23:01:02 +0000
Manifest this update:     Sun 27 Jul 2025 23:01:02 +0000
Manifest next update:     Mon 28 Jul 2025 23:01:02 +0000
Files and hashes:         1: XEatfg0Tk9Kl1lViBPnIbXw5FzE.roa (hash: G4U5UCTvd/mqwuDmGGvlZs+iLYiclpaGMY0aTsyHcfE=)
                          2: fvh727KV4chetLDjVmFTwiGEX4E.crl (hash: gGQxNaqeVx7alOag6+xkAkwlIt6yk9639ImdShNykxI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/ca9ff3-19a2-4e65-85f7-546a845b6b39/1/fvh727KV4chetLDjVmFTwiGEX4E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/ca9ff3-19a2-4e65-85f7-546a845b6b39/1/fvh727KV4chetLDjVmFTwiGEX4E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fvh727KV4chetLDjVmFTwiGEX4E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 23:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4e:1e:43:66:f1:93:67:3a:c1:55:cb:ab:08:9b:90:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ef87bdbb295e1c85eb4b0e3566153c221845f81
        Validity
            Not Before: Jul 27 23:01:02 2025 GMT
            Not After : Jul 28 23:01:02 2025 GMT
        Subject: CN=9b32827183bf9ec9f5a100668fe11eb27ce8f724
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:f9:7b:e0:8b:22:b4:21:47:fa:d4:c7:4f:54:
                    4c:03:1f:0f:37:3a:dc:91:14:1f:0e:87:dd:f4:ed:
                    c7:8a:df:69:74:da:70:4c:dd:4d:64:91:14:43:20:
                    7f:5f:66:dc:50:6c:53:9c:42:ef:7d:40:c5:cb:05:
                    38:16:9d:35:3d:5c:d2:70:ec:78:25:f7:fe:f7:a5:
                    c4:d1:69:6e:96:01:ff:6a:45:ab:52:8e:20:24:c4:
                    ea:fd:9f:11:6c:53:b7:75:09:91:64:9c:6f:de:bc:
                    5b:69:45:67:91:65:c0:c3:e2:28:d0:5a:6a:8f:59:
                    62:94:94:57:9e:ab:ab:37:b0:23:dc:21:58:37:2f:
                    c3:52:0f:b1:11:51:c8:ab:87:84:af:53:2c:9d:ad:
                    74:11:ff:62:11:5b:0e:af:50:ce:3f:1a:50:1e:8e:
                    db:57:18:ee:5b:92:47:d8:58:53:9b:76:16:1d:93:
                    aa:20:2a:89:06:93:73:76:cc:62:37:cd:a8:8f:f6:
                    ae:00:c4:ed:41:7e:4f:ab:e8:06:b4:8d:26:d7:14:
                    ef:09:14:fc:2d:62:77:eb:b1:9c:40:9d:8e:50:e6:
                    40:b3:d9:15:b9:77:3b:77:c9:e9:4c:64:ef:45:90:
                    c8:ab:60:06:98:91:fa:46:6b:1f:83:3e:4b:9b:14:
                    ed:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:32:82:71:83:BF:9E:C9:F5:A1:00:66:8F:E1:1E:B2:7C:E8:F7:24
            X509v3 Authority Key Identifier:
                keyid:7E:F8:7B:DB:B2:95:E1:C8:5E:B4:B0:E3:56:61:53:C2:21:84:5F:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fvh727KV4chetLDjVmFTwiGEX4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ca9ff3-19a2-4e65-85f7-546a845b6b39/1/fvh727KV4chetLDjVmFTwiGEX4E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ca9ff3-19a2-4e65-85f7-546a845b6b39/1/fvh727KV4chetLDjVmFTwiGEX4E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:93:a9:f3:2e:0a:45:9d:3e:08:0f:a5:fe:17:da:31:68:e3:
         32:67:7b:4c:24:8f:61:f4:4c:ea:90:fc:cf:3f:de:15:9c:a8:
         93:25:e3:c8:bf:08:10:58:99:12:6d:ff:37:46:9e:7a:33:d3:
         8a:d4:7c:cb:2a:c1:3e:46:be:00:45:33:a1:e2:b1:94:87:8c:
         e2:d9:04:45:4f:8b:48:73:0f:f9:f9:85:da:57:bd:35:e6:9a:
         f1:e7:5d:5f:4f:10:ec:c6:f9:b8:b7:b8:a5:8d:b0:51:bb:23:
         d7:c2:c3:56:50:e6:cd:18:bf:dd:ae:24:67:ba:72:f2:65:e5:
         dd:a5:26:f4:75:8a:60:1f:cc:5d:de:49:99:dc:64:26:11:a4:
         e4:65:7f:90:21:1d:68:b7:ee:b9:6d:34:44:e2:9a:df:f6:08:
         96:45:1e:7a:0f:df:47:68:a9:91:a5:ae:8e:45:50:27:24:dc:
         f2:a5:e5:d8:f1:8d:d8:3c:a0:9f:0f:d2:cb:e2:91:25:b3:f0:
         0c:fa:75:e0:68:b3:4f:a3:b4:86:7c:31:4f:f2:e4:3a:0f:bd:
         84:16:c7:92:2a:82:e2:8b:3a:1f:f2:25:13:f7:dc:d1:a2:fa:
         0c:55:2f:43:6d:c6:40:45:68:97:9a:d9:5d:32:77:7d:53:fe:
         a9:ef:01:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 08:46:54 2025 by rpki-client